diff --git a/data/pubkeys.nix b/data/pubkeys.nix index b6a6fff7..22c88af6 100644 --- a/data/pubkeys.nix +++ b/data/pubkeys.nix @@ -10,7 +10,7 @@ let hosts = { ds9 = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ+BBXufXAJhyUHVfhqlk8Y4zEKJbKXgJQvsdE482lpV" ]; picard = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAm3UXZaN95WBUaS9SiHLNEuI1tP1x1w07qnYxPe+vdr" ]; - musicpi = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhyp46xPOgZFgGsbSUdBtHWJeqFASu+LFjwUK8b+gSt" ]; + daedalusvm = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKLjCl98zeOF9lk2eELpyvUMfivjhvYU8uvc9j6zWwZy" ]; }; in { diff --git a/hosts/daedalusvm/default.nix b/hosts/daedalusvm/default.nix new file mode 100644 index 00000000..51e5aa02 --- /dev/null +++ b/hosts/daedalusvm/default.nix @@ -0,0 +1,31 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page +# and in the NixOS manual (accessible by running ‘nixos-help’). + +{ config, inputs, pkgs, lib, ... }: +let + pubkeys = import ../../data/pubkeys.nix; +in +{ + imports = + [ + # Include the results of the hardware scan. + ./hardware-configuration.nix + ]; + + # Don't Use the systemd-boot EFI boot loader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + # Immutable users due to tmpfs + users.mutableUsers = false; + + ragon = { + cli.enable = true; + user.enable = true; + + services = { + docker.enable = true; + ssh.enable = true; + }; + }; +} diff --git a/hosts/daedalusvm/hardware-configuration.nix b/hosts/daedalusvm/hardware-configuration.nix new file mode 100644 index 00000000..338adfa3 --- /dev/null +++ b/hosts/daedalusvm/hardware-configuration.nix @@ -0,0 +1,21 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = [ "${modulesPath}/profiles/qemu-guest.nix" ]; + boot.initrd.availableKernelModules = [ "xhci_pci" "virtio_pci" "usbhid" "usb_storage" "sr_mod" ]; + + networking.interfaces.enp0s6.useDHCP = true; + swapDevices = [{ device = "/dev/disk/by-id/NIXOS_SWAP"; }]; + fileSystems."/boot" = { + device = "/dev/disk/by-id/NIXOS_BOOT"; + fstype = "vfat"; + }; + + fileSystems."/" = { + device = "/dev/disk/by-id/NIXOS_ROOT"; + fsType = "ext4"; + }; +} diff --git a/secrets/cloudflareAcme.age b/secrets/cloudflareAcme.age index 1a961e8d..00bb4dbd 100644 --- a/secrets/cloudflareAcme.age +++ b/secrets/cloudflareAcme.age @@ -1,15 +1,14 @@ age-encryption.org/v1 --> ssh-ed25519 ugHWWw DE5KD+R+e1lb1o4cKFJlwXuOC5Ustc0P6d6HKMWHzh8 -q696lgcVHGKQJjYrHqpa/8M8+qmFMEn7bGa/yqGXrmo --> ssh-ed25519 UU9RSA qDj+5sLCjdgKVG4Hd6BbKh9nGZU4DJIubQwkJZ9QkmQ -uk7e5NHKKkDi2OZq4d9aH8YCyulAjfkj55MNKUizZWQ --> ssh-ed25519 IbXxfw 1b1K7Nbkjwt6cNWvSQecu/e5bSNPB4C1puvxjxFjAkk -KM+/IpuG6C5217OIcbv7vUV1Sk45ckrl7ok2U94tHD8 --> ssh-ed25519 WceKOQ dKiRYF/lEwyVxcZDSun2gL94laXMsTAwjkTLrfGeszY -mviaDjsmaa/CLVvBoCK1gXLqc/R65+ZV6JIzTyzlwDE --> ~j6)4y\?-grease 0KF% -6xkODqF9GTL/jmnXMMRMW2npQW9tAQydKOdPnRYO4BmpENEaW2sNMUXSonubp5t0 -M89ut56ZfIcW5A9eul/JPY62osMTlpqaJnllud3YWr2Ufv2jOGGYCCwrWRXwjnyT -a4VL ---- a6EiNzIGd2LSO0jB+c7dSSvQIWknjxvVuV0ZyiWT1iw -EV H hȅay{nRVDOJ0Cl4cn5_[v.7sqb}(f<ҋNۮ?Xv-(%k- \ No newline at end of file +-> ssh-ed25519 ugHWWw ET4RvPlyRq0RHTvTgA51jqYE3hukU+5b9Pqu6TUoUkc +xt/0GMZserIOWPXfl9/r2u/IOEecJc+7tzFD+QhtPmo +-> ssh-ed25519 UU9RSA ItHKphKY7MOaPcQ4zsUuqZFuhVoU0IYc6a7nxEnAs1M +IyxfKpwxoYSQdl0FzBZHx3SV2ye/CIWrNSf5zJXnuS8 +-> ssh-ed25519 IbXxfw T3R7EbqDIO0cS0lNbojuaxWXF6A7E58oMO/EeriqyT4 +k72DGwseD3gWOgZCBGN8kBcxXG56DScf7A5HSFsXg1I +-> ssh-ed25519 WceKOQ Aq02UlWhhy308Fz3iLz+l6L/kXd1e1PU+UW9Ts/gTDw +aVBId1iQ40Brqt/1+Rv6pRQPiOEcwB5Bi6YyKJ6EKu0 +-> qU-grease ,?V >0a +KZSxLSsrGh7/U54MJzoLhszWoskuQAANf60alfqhUumwUCEzdRReg1iKWbqZyppz +DVkEmoLGwrItSacwDNuqRWv1DiNo+P71NBp6SvMN5RLvI6JQsheMZz3ADwaYSw +--- HI/LInQ7KkTsG15JUSfVEeCwAutBqU1SxrfA+5dZwag + pH̝ͫpָI-23Smg6u@Y0yAĵ], 4̱=%.s=HZKR[MYv \ No newline at end of file diff --git a/secrets/ds9OffsiteBackupSSH.age b/secrets/ds9OffsiteBackupSSH.age index b18c7bed..c358a66a 100644 Binary files a/secrets/ds9OffsiteBackupSSH.age and b/secrets/ds9OffsiteBackupSSH.age differ diff --git a/secrets/gitlabDBFile.age b/secrets/gitlabDBFile.age index 915f44ec..256c2d09 100644 Binary files a/secrets/gitlabDBFile.age and b/secrets/gitlabDBFile.age differ diff --git a/secrets/gitlabInitialRootPassword.age b/secrets/gitlabInitialRootPassword.age index f3afa766..af88bbe1 100644 --- a/secrets/gitlabInitialRootPassword.age +++ b/secrets/gitlabInitialRootPassword.age @@ -1,12 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 WceKOQ M3py3B6cVKa70y/2P/7IGd84gCnFkTuY5Eav2FHEdjE -3iODa4p5fxmORhz71XLov3EgVdCz3OXw4JFmcvryKbI --> ssh-ed25519 ugHWWw tORpqcjWk9OGNK9FU/RIWrLFpgilsRM10yPR/289F0c -nS8Hh1JSkgDy4Wzwt4XegwYvIrkCpm2gVal18uFK3Js --> ssh-ed25519 UU9RSA +dC9ZdLbum/pAsXCpqmCWkR6A9cRATSKiQZt9YxonTo -oJBIT5lM5Aqi3DB1lF/bIF1fwAaSHyYQCl1iEro9kZE --> cX}4N%W-grease -DphAyC4xwA7WxoDZ1fzuYajR+Pkn5ItjwWG48BVltOJ1qrHJiKxvpIXOZsfm/alF -baZr5hb4ZM9TG7/DiJ4WMpE/B9uCVyBZXWZOEng ---- B48/JaTdKI8drTxRmNeJD31a7sbyAztdpnsvk8t91GQ -GU8j-ّ8٠EBhAʨ8!YY)K \ No newline at end of file +-> ssh-ed25519 WceKOQ 7WC4xzrGVJ/QxJ783jHIYc/dE/bpISFoBh0qkydAhgs +E23G1Bu/5y/z1LGWTomgwrWl7pkEVHKhKGeVElThiW4 +-> ssh-ed25519 ugHWWw 2qsCCYr3hNKA5eFtEeq2FgHRHYAbVLtQL5vpWq4Zb2Q +g73nqZivYbGG32BriTXscR7wGNIpvyjwVxilfFJkAuU +-> ssh-ed25519 UU9RSA IV6dk4m5KDww0J8T8+7UsElqI/a2/FJh16MgAreMlwM +ruI+CosRy++bV1vASimIic7fVeKad3tFJ+iazJoOXvo +-> F`W-grease "?jH>\#2 ,;^35J d8E@S%n OwSYRTN +f6Yk3eBC2OhWTw +--- ddf26adLz8aelGPNJ8NVn7OXKOhC7qqqegjN0T/2UII +l;ϟ:3xA2B;Y: ssh-ed25519 WceKOQ DRQr3QCZ5LLySeGDmKrqDFrJ5q33IKD1In878dEFsyA -dPyzC+zamdwnyLIlbHJHr8hS72TEQUMGWbCehH8O8Hg --> ssh-ed25519 ugHWWw soOwkh841qpnWgcirZSEHk/KzgEqSRWQPO9w4hsCcmA -b/bLaU6Zn1owqP/ONvEJMys+aeU/pXXSJa2T1FppgcA --> ssh-ed25519 UU9RSA dsSrrUht6Wzplekaf4vhtvKpGwgzlLDsSFZKsvWqiiA -GHVmkuN4pJ0RIg11HXjQmzWzShbGAsPDSsCPNBKBQ8E --> ;(Ko;&-grease H}A R -RzUJa+bwqrE2S2dficADVL6Krr85qm7Iqskw6iPLYbZ6e0JVgMsdHV0/6Q ---- oMxnaewPxjwhhxFOJEuWP2NzyZDt8gcfoZj57+AmckU -x¯ p=ytU%,?E]Ʊ1m̀nU.I̸Nhs}Ͱ\V'U,yHI \ No newline at end of file +-> ssh-ed25519 WceKOQ 8d8HyUJjkB9EOGGhEZVNfynvk3eKCantalgxdmaLkBo +y2KGRQLZe8Gvu24PScvILyL4vV93FkexYwn6Ok5F64g +-> ssh-ed25519 ugHWWw pkc3SMj73eGC4NSIWaWdfGXLZapuPdIfFXpwEFMcMR0 +2BFAifWKMCD80VzZPUCQd5M+GxVE2G9Xv+t1yrJhC0E +-> ssh-ed25519 UU9RSA cmoqVr04Ib1/chCsf1qawzenGIWoWBzTJzEtg0oP7hs +cCuChiH5SroqPkfn0xxwwzMMO81TVXPIYteWsz5IyH4 +-> #gh9HH;k-grease +H9DftVHq+s+eHCPpAOLPMDeolhXZFL5p0uV90lkIFrn0nynT930VRyEDG9mzd/JT +ESNojwaJXiiV86NWXerwm/GTzuB4MjBOnvbjPSuYCvXONudOf+4do502S/6h5sI +--- AOpthzyHcx4saVdHISAc0mL2NXNdplXL10vbCTt2YSE +(3U%x0Y2%a#]=99Ssj$2y/7)ZǕX]8[649oRZ+ẻfN \ No newline at end of file diff --git a/secrets/nextcloudAdminPass.age b/secrets/nextcloudAdminPass.age index 6448561a..91f8b1e5 100644 Binary files a/secrets/nextcloudAdminPass.age and b/secrets/nextcloudAdminPass.age differ diff --git a/secrets/nextshot.age b/secrets/nextshot.age index 3bda30ab..7d96e175 100644 Binary files a/secrets/nextshot.age and b/secrets/nextshot.age differ diff --git a/secrets/paperlessAdminPW.age b/secrets/paperlessAdminPW.age index 46072a17..da31a8f8 100644 --- a/secrets/paperlessAdminPW.age +++ b/secrets/paperlessAdminPW.age @@ -1,11 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 IbXxfw R5AD+t/S4rz3t7F2YVMHqRtXwdkaEv8A5tMqCRoT218 -Q8KzZWjuxPTkqCY9s4hkSb7ijVk4iQ/174+kasXf7cM --> ssh-ed25519 ugHWWw FSmejSaccWyUa5ALkxLVC4qtPU528TAp1Q1tijRUEzM -9dc3WgC/3kSK3zb6uG+3gWNCli1tAk0k4K4o6GFy9WA --> ssh-ed25519 UU9RSA 0283kXKNQpMa04ZcDcD6M4ln5avF6gw/3qh48nYhemU -r5PZ/EZEzjp075i5FUt4iQXf6OkBr0WmDr/YlGTnbko --> ^E&)-grease O.r^p897 -p3mQhe+BojKl5+Gvpxy6F0BZuLWEY1wW0ybKd/RITiXZgDeMhw ---- xUsLTuxsE7ad8k2/o5i7t4iQPIOieFqHNsWOXk/d01s -쨗tx‹89YllTVPp DH1gz"d]'~t*h> \ No newline at end of file +-> ssh-ed25519 IbXxfw UW6LqQ3v8J1rqOSHizL/OErakPHGkNo12Bzw9YMDqSw +RXaNB8L4htMSwH3JZlUfetrMpZeJVL69F2zxVEd9dJM +-> ssh-ed25519 ugHWWw otkAeu94Olh6kSQJXSBQKnEP6elPRElQhrbkttVpHxQ +4AMes9WPXIJ2wlpx4nwaKIN483GIyJKbkKK+YFU8FC4 +-> ssh-ed25519 UU9RSA L5nDWEXhWjaLjpbCF1QiPjzPkvKiDP9b2Km2jZ0cTVk +Fwy+lP5J06Tl/eRfcgoXBiqRWU414zAJ9OqW8sDx0rI +-> -zj-grease C2W:~L T +Iyrfxg +--- 2JwVqVwEC9JO9O6jUnfZdi1yrR41U+jKyYCeeAVv44w +!K➉/qeP%e{%d1BD(R_T`kWIF \ No newline at end of file diff --git a/secrets/picardResticHealthCheckUrl.age b/secrets/picardResticHealthCheckUrl.age index e812f0f9..15104037 100644 Binary files a/secrets/picardResticHealthCheckUrl.age and b/secrets/picardResticHealthCheckUrl.age differ diff --git a/secrets/picardResticPassword.age b/secrets/picardResticPassword.age index 78c9b230..3742133d 100644 --- a/secrets/picardResticPassword.age +++ b/secrets/picardResticPassword.age @@ -1,13 +1,11 @@ age-encryption.org/v1 --> ssh-ed25519 WceKOQ k2R5Jitq8cEQPR6XFnucyYE3BDlBTnXeXakig5Rb6CQ -aXWMcZDMsC4UqpgkUywkOuHGTb5aeTHvpKNjxEUfTDo --> ssh-ed25519 ugHWWw 0CCoHYRYlYq5wFt8R26y5pSfSqTQzcR4jzdWl2E12TQ -6qjep1dn6B5DA2lcMZXItnAzxE2eHY/XSJYVyDGRwW4 --> ssh-ed25519 UU9RSA CMo9lkcazC9TXypP/o/majaFp0UP++XAbh65TYvEiDo -GD1/sNmjRM2+9RpPbCMoMU9Q0JQb2jsjji1Yt0+LR9w --> +!c:-grease zi]- eO\* -nKAD5+pPHB3K+HtpEHA+bDBG/P9ec6pb ---- 5x5Rpg23SqXQK/sSiUNEZ0tdXF+GxgBSTWVSbIOmmNw -IXnTBth|XwmӺS=SrMC萊{M…^HaWi -;} -,:t=rC||h$ \ No newline at end of file +-> ssh-ed25519 WceKOQ RwA4mxUnGSGTjRzwnsoKl3X8EpVwDSF/e3jC2NkvfDY +vIE7X5qYCK7ndyu4JcKlnSOIpHAmHBMW8zMsGHVJ0F4 +-> ssh-ed25519 ugHWWw NETKlsTyZsvJVSO+vMAnR3bD6j1reHyUA2QXpzRIEhM +qh2ricjY4XgRYnj5pROo9URUkgy8/6/SLSkenTxNVnE +-> ssh-ed25519 UU9RSA E8dytvN4FZ7uqDp6b+1jD7DcDisQ4mQhMrorHM9sHno +9YbTgKRVd7quVbhYY1EhJKFR621ajrflg5Hh2bHJqwo +-> paifQ-grease 3! pvk7' k"; of-g +5eXUYmAl9ASz +--- 1RZ5gqCnISWu2msk5KN2F0XZ76HC58y25g8Zt/zLKAo +oZO$P{"}zTl/Tymz:ȤqB˭"s'帔Bz/k5&@_n0#x \ No newline at end of file diff --git a/secrets/picardResticSSHKey.age b/secrets/picardResticSSHKey.age index 0dd651f5..83c855fe 100644 Binary files a/secrets/picardResticSSHKey.age and b/secrets/picardResticSSHKey.age differ diff --git a/secrets/pulseLaunch.age b/secrets/pulseLaunch.age index c30f40e2..3ed81823 100644 Binary files a/secrets/pulseLaunch.age and b/secrets/pulseLaunch.age differ diff --git a/secrets/ragonPasswd.age b/secrets/ragonPasswd.age index 4fd0eb56..6ad112de 100644 --- a/secrets/ragonPasswd.age +++ b/secrets/ragonPasswd.age @@ -1,16 +1,15 @@ age-encryption.org/v1 --> ssh-ed25519 ugHWWw +FHwZvsw61Oz94pLCZI3Hf0MnKVrvBrZ5NIXA5pABjM -741DC7k+1yLIOl9Wc4A50kywIrK3BCuKEVZ9fP0l/EA --> ssh-ed25519 UU9RSA V2/HDc2w03ArHLZBccHOUVf6851VI9DtHwch9niHXXU -B9d3p6R7wGQmcpthbHi3I0/HCLDizohW8EiPaYKsp8U --> ssh-ed25519 IbXxfw LlZkMHSKYHdTtJvO6VBybmotdsVU8yplstUGeMKiA18 -4bu+TDWhkeSPycYBBcPoai+fCP4PppgBXewcqXYem5U --> ssh-ed25519 U2IFSw 16fypyHqQkH8W1RjDlDid6wpGygBYCtgqKYIn1KfYEU -6wevhYdYIoWlAcJ9ykkixo9RTx9YJ0qBkXJEqX0DB5E --> ssh-ed25519 WceKOQ QTMaAnkk+4cNTi8A4SeSKVMXbVQ2Pmd5mqM3DlcXHSU -L3ee5gcgJnN1OdsRbYiTmAWppgPoBG2uGcj7UhBaDPk --> p-grease i|i(!: }G: -zg ---- a5FUpvshJxUeYHfefzhscXawq2s/IT5eKrbf+jvY8wI -7 ߑFFX}&-=Y|d ͦqܑ -RL\Z&Ѝцip.y^kj gFljeeθ2{qvn&fey@Iӗ"hh$"qXfYH| \ No newline at end of file +-> ssh-ed25519 ugHWWw Yh7yZR7Mp5TuPD3r33rFcSIEuURgH1qKZuWWIw5z+1Q +NgGop95qQuLT/liGCPBCgNmKsRjrE9yokqhpUU2dYQU +-> ssh-ed25519 UU9RSA ALeQp7EnIcGH5Yl5C7RWfdE9CMhvbzRXCjKXSzqi7gI +vDGWh6S4EbJBeVQIuPPZP1TSaFP9uoW+shEstBzxjFs +-> ssh-ed25519 kKx7Qw XeJW2U6za78lTMIdduUjgYU2NFQBWL0O4AQPaXx5TCk +4NoBvjshDWswGc90Yb58X9kDceZRVVI4h45N0zG6Xow +-> ssh-ed25519 IbXxfw VJJ5Ndu8/8L3iqFIMtqGqyqYfZCQVdlmBmsvEgwxkmQ +XnzVDYZ8Bp6gaiqujswGB+q+BtSF10PPpjWGVjC710g +-> ssh-ed25519 WceKOQ q58TN4jXySWTsE+K/3xnN6MIMLfyv/3wx4mIOCquskw +BMSVu3HWrVgG54IaTagQN4Og4MJl3d++w0kPrZ2qpIY +-> 2Wr8^uaE-grease 8 RU&_6KOI +JOg +--- KJ9TUBOF7kG3MwHQAMqIKPKNsIFrT6Ddb4QDJba8ZEo + MPo5^¸8"*:}1tL˔@ыtd7ZȘY/(]*Q% [w+A:$L'D=_1y9uMhZ0ǯQ`5dp_ \ No newline at end of file diff --git a/secrets/rootPasswd.age b/secrets/rootPasswd.age index ffb51775..dd05a3ce 100644 Binary files a/secrets/rootPasswd.age and b/secrets/rootPasswd.age differ diff --git a/secrets/tailscaleKey.age b/secrets/tailscaleKey.age index b8e26a33..03ba0e07 100644 Binary files a/secrets/tailscaleKey.age and b/secrets/tailscaleKey.age differ diff --git a/secrets/wpa_supplicant.age b/secrets/wpa_supplicant.age index 7ad0a00c..0c768c45 100644 Binary files a/secrets/wpa_supplicant.age and b/secrets/wpa_supplicant.age differ